Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qv6f-vv52-ch9r

Опубликовано: 05 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

EPSS

Процентиль: 42%
0.00199
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

CVSS3: 6.5
nvd
больше 2 лет назад

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

msrc
3 месяца назад

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

CVSS3: 6.5
debian
больше 2 лет назад

When Firefox is configured to block storage of all cookies, it was sti ...

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость локального хранилища (localstorage) браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 42%
0.00199
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862